$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft File: x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft (raw, json) Hash identifier: 6cQnrea3zZYjYMPoGOTIhlXn7MLQAwtQ2PF0/9J9wiM= Subject key identifier: 5C:DF:C3:21:57:A9:52:FA:3F:99:54:EC:43:6A:18:C4:3C:B4:E2:43 Authority key identifier: C7:7C:13:09:F4:A1:53:0E:A3:95:41:45:28:81:5F:9C:76:7C:51:5B Certificate issuer: /CN=A91E3377/serialNumber=C77C1309F4A1530EA395414528815F9C767C515B Certificate serial: 0585 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft Manifest number: 0580 Signing time: Mon 08 Sep 2025 23:19:22 +0000 Manifest this update: Mon 08 Sep 2025 23:19:22 +0000 Manifest next update: Mon 15 Sep 2025 23:19:22 +0000 Files and hashes: 1: x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl (hash: vQR1WsMaZAUAJs6VQiXdB5QJnPEa5rf3XSJFbtIllS8=) 2: 4756B350EF9011EBAAE0375AC4F9AE02.roa (hash: H5pjI/DUhiXyW6sQwhGG/wb5HeJLy8aTxQs1mqyRqSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 23:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1413 (0x585) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3377, serialNumber=C77C1309F4A1530EA395414528815F9C767C515B Validity Not Before: Sep 8 23:19:22 2025 GMT Not After : Sep 15 23:19:22 2025 GMT Subject: CN=68bf647a-e7de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f2:48:94:ee:d1:6a:1a:39:9d:c4:ae:39:d1: f5:b6:03:c5:e0:79:cc:df:57:a2:72:da:dd:73:e7: b6:d3:de:1e:89:f4:16:80:8f:f0:5a:e8:72:91:9a: 40:77:05:14:17:24:c1:07:99:ab:90:61:3e:4a:23: 4e:eb:e0:e8:05:79:a1:bd:bb:82:c7:7b:fb:31:ea: 1b:bf:76:46:74:25:ce:3b:53:ff:63:45:a0:06:b3: 07:f4:9f:4e:95:f3:f1:30:14:00:ba:f9:25:eb:33: 42:2d:8c:0c:23:85:1d:dc:6b:af:08:89:fa:83:1f: 43:7e:6a:a6:95:9b:95:de:fa:ba:24:35:b0:49:e6: ab:a7:88:67:a5:49:9a:f2:71:67:90:84:fb:03:cb: 83:e5:7e:cd:79:dd:43:f3:86:e3:db:29:4d:c9:73: 88:d0:5e:d6:85:c9:b4:90:d9:e1:b5:da:76:f9:34: 44:9e:c8:b3:a8:ad:65:da:ab:64:de:41:00:ad:a1: e4:0e:a2:c3:c6:f7:84:8e:5e:01:ee:36:1e:7b:8b: 70:f7:c3:aa:74:69:23:07:dc:d8:41:e1:e0:25:f0: 85:5b:67:04:75:64:29:17:dc:03:a5:5a:26:5e:8a: dc:ea:12:01:c1:d4:73:84:58:56:ba:50:92:e5:60: 1a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DF:C3:21:57:A9:52:FA:3F:99:54:EC:43:6A:18:C4:3C:B4:E2:43 X509v3 Authority Key Identifier: keyid:C7:7C:13:09:F4:A1:53:0E:A3:95:41:45:28:81:5F:9C:76:7C:51:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:09:4d:93:66:d7:25:98:12:2c:bf:0d:49:79:59:ff:5d:5f: ac:56:02:fe:93:ef:cd:e2:0c:62:cd:fe:ba:d2:4f:fc:b8:1e: e4:29:6f:98:77:81:5b:cf:bb:d1:a5:68:1d:3e:de:0c:2d:7d: 3e:2c:a0:73:61:18:10:ba:27:33:5c:b7:e7:90:12:19:f4:20: 28:2f:5e:73:d2:64:a0:a1:66:fc:b5:76:34:3b:dd:3a:34:55: 74:23:d8:6a:d9:f7:2f:9e:4a:0f:85:8b:2b:cb:da:47:66:a1: 1f:f4:bd:8b:2d:ec:21:fe:6f:95:72:57:f0:4c:a9:6d:4a:63: 54:24:3c:8b:29:ac:4d:a0:e4:a1:ee:a1:fe:5a:ca:96:d2:d5: 7f:f1:6d:66:c7:65:79:7e:61:b7:f5:ed:82:2b:f9:f8:51:da: c2:65:7a:e7:28:5c:c9:19:23:1f:e4:23:56:72:0e:30:02:10: 37:f7:5f:48:82:cb:66:c1:60:c0:a7:47:71:bc:ab:5a:4f:57: ce:cb:24:f3:76:7c:c8:6a:28:36:13:ba:24:db:e5:70:5e:d1: 4c:fd:51:43:c7:73:d0:91:d4:c5:68:13:a4:c7:a1:76:65:56: 2d:3a:2b:ed:82:39:a7:9d:fc:42:1f:8c:17:8d:9c:b3:70:3a: 42:b8:99:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMzNzcxMTAvBgNVBAUTKEM3N0MxMzA5RjRBMTUzMEVBMzk1NDE0NTI4ODE1RjlD NzY3QzUxNUIwHhcNMjUwOTA4MjMxOTIyWhcNMjUwOTE1MjMxOTIyWjAYMRYwFAYD VQQDEw02OGJmNjQ3YS1lN2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvJIlO7Raho5ncSuOdH1tgPF4HnM31eictrdc+e2094eifQWgI/wWuhykZpA dwUUFyTBB5mrkGE+SiNO6+DoBXmhvbuCx3v7Meobv3ZGdCXOO1P/Y0WgBrMH9J9O lfPxMBQAuvkl6zNCLYwMI4Ud3GuvCIn6gx9DfmqmlZuV3vq6JDWwSearp4hnpUma 8nFnkIT7A8uD5X7Ned1D84bj2ylNyXOI0F7Whcm0kNnhtdp2+TREnsizqK1l2qtk 3kEAraHkDqLDxveEjl4B7jYee4tw98OqdGkjB9zYQeHgJfCFW2cEdWQpF9wDpVom Xorc6hIBwdRzhFhWulCS5WAakwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzfwyFX qVL6P5lU7ENqGMQ8tOJDMB8GA1UdIwQYMBaAFMd8Ewn0oVMOo5VBRSiBX5x2fFFb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzM3Ny82MEI3N0RBRUVG OEUxMUVCQjBEQTRFNTlDNEY5QUUwMi94M3dUQ2ZTaFV3NmpsVUZGS0lGZm5IWjhV VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gzd1RDZlNoVXc2amxVRkZLSUZmbkhaOFVWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzM3Ny82MEI3N0RBRUVGOEUxMUVCQjBEQTRFNTlDNEY5QUUwMi94M3dUQ2ZTaFV3 NmpsVUZGS0lGZm5IWjhVVnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClCU2TZtclmBIsvw1JeVn/XV+sVgL+k+/N4gxizf660k/8uB7kKW+Y d4Fbz7vRpWgdPt4MLX0+LKBzYRgQuiczXLfnkBIZ9CAoL15z0mSgoWb8tXY0O906 NFV0I9hq2fcvnkoPhYsry9pHZqEf9L2LLewh/m+VclfwTKltSmNUJDyLKaxNoOSh 7qH+WsqW0tV/8W1mx2V5fmG39e2CK/n4UdrCZXrnKFzJGSMf5CNWcg4wAhA3919I gstmwWDAp0dxvKtaT1fOyyTzdnzIaig2E7ok2+VwXtFM/VFDx3PQkdTFaBOkx6F2 ZVYtOivtgjmnnfxCH4wXjZyzcDpCuJmQ -----END CERTIFICATE-----Generated at Tue Sep 9 08:59:00 2025 by rpki-client